With OPENAM 14.4.2 I have the following exception when I try to add an OpenAM Identity Subject to a Policy:
'code'
com.iplanet.jato.NavigationException: Exception encountered during forward
Root cause = [org.forgerock.i18n.LocalizedIllegalArgumentException: The provided value "xtauctionsALL" could not be parsed as a valid distinguished name because the last non-space character was part of the attribute name 'xtauctionsALL']
at com.iplanet.jato.view.ViewBeanBase.forward(ViewBeanBase.java:380)
at com.iplanet.jato.view.ViewBeanBase.forwardTo(ViewBeanBase.java:261)
at com.sun.identity.console.base.AMViewBeanBase.forwardTo(AMViewBeanBase.java:162)
at com.sun.identity.console.base.AMPrimaryMastHeadViewBean.forwardTo(AMPrimaryMastHeadViewBean.java:113)
at com.iplanet.jato.view.ViewBeanBase.forwardTo(ViewBeanBase.java:229)
at com.sun.identity.console.policy.SubjectOpViewBeanBase.handleBtnFilterRequest(SubjectOpViewBeanBase.java:484)
at com.sun.identity.console.policy.IdentitySubjectAddViewBean.handleBtnFilterRequest(IdentitySubjectAddViewBean.java:244)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at com.iplanet.jato.view.command.DefaultRequestHandlingCommand.execute(DefaultRequestHandlingCommand.java:183)
at com.iplanet.jato.view.RequestHandlingViewBase.handleRequest(RequestHandlingViewBase.java:308)
at com.iplanet.jato.view.ViewBeanBase.dispatchInvocation(ViewBeanBase.java:802)
at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandlerInternal(ViewBeanBase.java:740)
at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandler(ViewBeanBase.java:571)
at com.iplanet.jato.ApplicationServletBase.dispatchRequest(ApplicationServletBase.java:957)
I try with many groups names but the result is always the same
Hey, with the latest and 14.5.1 OpenAM docker running, I always encounter this ERROR message when following the quickstart guide to setup basic openAM.
ERROR: created internalAppSSOToken:WnEwa1lRRzhMakdvVzg1N3JCRUFBZz09MTabcdefgh==, authInitialized: false, SystemProperties.isServerMode(): true, SystemProperties.get(AMADMIN_MODE): null
amSecurity:04/24/2020 04:10:24:823 AM UTC: Thread[http-nio-8080-exec-3,5,main]: TransactionId[7ac18dc5-ac86-41cb-b1f7-c29f500fd4d4-14]
ERROR: created internalAppSSOToken:YkVBNFphUXRUU2lkZ3FzNHJCRUabcdefghicyNA==, authInitialized: false, SystemProperties.isServerMode(): true, SystemProperties.get(AMADMIN_MODE): nullTho the UI browser page shows configuration successful created....But when I press Proceed to login, I got invalid token and the page just empty.....Checked the docker log, showing
ESAPI: WARNING: System property [org.owasp.esapi.opsteam] is not set
ESAPI: WARNING: System property [org.owasp.esapi.devteam] is not set
ESAPI: Attempting to load ESAPI.properties via file I/O.
ESAPI: Attempting to load ESAPI.properties as resource file via file I/O.
ESAPI: Not found in 'org.owasp.esapi.resources' directory or file not readable: /usr/local/tomcat/ESAPI.properties
ESAPI: Not found in SystemResource Directory/resourceDirectory: .esapi/ESAPI.properties
ESAPI: Not found in 'user.home' (/home/openam) directory: /home/openam/esapi/ESAPI.properties
ESAPI: Loading ESAPI.properties via file I/O failed. Exception was: java.io.FileNotFoundException
ESAPI: Attempting to load ESAPI.properties via the classpath.
ESAPI: SUCCESSFULLY LOADED ESAPI.properties via the CLASSPATH from '/ (root)' using current thread context class loader!
ESAPI: SecurityConfiguration for Validator.ConfigurationFile.MultiValued not found in ESAPI.properties. Using default: false
ESAPI: Attempting to load validation.properties via file I/O.
ESAPI: Attempting to load validation.properties as resource file via file I/O.
ESAPI: Not found in 'org.owasp.esapi.resources' directory or file not readable: /usr/local/tomcat/validation.properties
ESAPI: Not found in SystemResource Directory/resourceDirectory: .esapi/validation.properties
ESAPI: Not found in 'user.home' (/home/openam) directory: /home/openam/esapi/validation.properties
ESAPI: Loading validation.properties via file I/O failed.
ESAPI: Attempting to load validation.properties via the classpath.
ESAPI: validation.properties could not be loaded by any means. fail.. Caught java.lang.IllegalArgumentException; exception message was: java.lang.IllegalArgumentException: Failed to load ESAPI.properties as a classloader resource.
log4j:WARN No appenders could be found for logger (IntrusionDetector).
log4j:WARN Please initialize the log4j system properly.
log4j:WARN See http://logging.apache.org/log4j/1.2/faq.html#noconfig for more info.Any idea? Im using Docker for Mac...I noticed on the forcerock doc, it is said for macos, the web policy agent is not built for apache http server on macos. Is it related? Thanks
https://github.com/OpenIdentityPlatform/OpenAM/blob/797192ba86247198fe512aad0e3095b1d1b62b2a/openam-core/src/main/java/com/sun/identity/security/AdminTokenAction.java#L306
Authentication Failed message. Any idea why?
1 reply
https://github.com/OpenIdentityPlatform/OpenIG/wiki/How-To-Protect-Web-Services-with-OpenIG
https://github.com/OpenIdentityPlatform/OpenAM/wiki/How-to-Add-Authorization-and-Protect-Your-Application-With-OpenAM-and-OpenIG-Stack
Hi all!
I would like to use some REST api to perform simple tasks like getting session info from a cookie value, let say I would like to know if a cookie is valid or not.
I'm not sure which API to use since I have found 2 APIs and both seems to be broken; for example:
curl --request POST --header "Content-Type: application/json" --header "iPlanetDirectoryPro: AQIC5wM2LY4Sf...EAAjAz" https://oamsrv01.intranet.net:8443/oam/json/sessions/?_action=isActive&tokenId=AQIC5wM2...4MQACUzEAAjAz
and
curl --request POST --header "Content-Type: application/json" https://oamsrv01.intranet.net:8443/oam/json/sessions/AQIC5w...g4NzI3MjE4MQACUzEAAjAz*?_action=validate
returns code: 501, Not Implemented
instead, this call:
curl -X POST -H "Content-Type: application/json" -H "Accept-API-Version: protocol=1.0,resource=2.0" -H "iPlanetDirectoryPro: AQIC5wM2LY4S...QACUzEAAjAz" -d '{"tokenId" : "AQIC5wM2LY4S...QACUzEAAjAz"}' https://oamsrv01.intranet.net:8443/oam/json/realms/root/sessions?_action=getSessionProperties
return an empty json {}
We have OpenAM 14.5.1.
Can you help me? Is there a working api to do so in this version?
Moreover https://oamsrv01.intranet.net:8443/oam/XUI/#api/explorer/applications return a 404 and from the gui, clicking on "API explorer"
(this url: https://oamsrv01.intranet.net:8443/oam/#api/explorer) we get a page with a list API categories I suppose, but on the right, where I think should be some documentation, theres only a white box...
Is it a known problem or does it have to do with our theme modifications? I admit I have not tried a "vanilla" version of the 14.5.1 yet.
Thank you so much,
Marco
